Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31332f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e31332f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          OIXbgXo5FFDf7GZcSzVMzV8E32LM66Oth7tzCbek+D4=
Subject key identifier:   FD:34:C2:03:69:65:0C:C6:B9:9D:BB:BD:56:E7:28:54:20:78:DD:6F
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       3518F843C2DE69EBADABD16F8B1BB792228E8033
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31332f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:30:22 +0000
ROA not before:           Sun 11 Sep 2022 23:25:22 +0000
ROA not after:            Sun 10 Sep 2023 23:30:22 +0000
asID:                     267256
IP address blocks:        45.232.50.13/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:18:f8:43:c2:de:69:eb:ad:ab:d1:6f:8b:1b:b7:92:22:8e:80:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:25:22 2022 GMT
            Not After : Sep 10 23:30:22 2023 GMT
        Subject: CN=FD34C20369650CC6B99DBBBD56E728542078DD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:90:76:9b:ec:b3:d7:1c:11:15:94:4b:49:
                    3b:8f:3b:98:12:2d:55:6a:f0:b2:4f:a6:02:36:59:
                    f4:e6:09:68:68:d3:d3:40:a6:6b:9a:79:5d:7c:43:
                    f3:ea:72:ab:55:a6:e0:c4:7d:9a:4b:5e:9f:f7:4f:
                    09:43:7e:11:ae:eb:66:b4:28:73:15:d0:95:a5:f0:
                    08:9c:90:8a:88:5e:8f:7b:6b:63:d2:c8:e4:99:7e:
                    60:71:8a:b9:db:be:05:ab:15:9c:cb:0d:99:da:70:
                    a6:ca:1b:64:24:d7:75:60:cf:77:8f:16:ba:9b:dd:
                    7f:3c:b7:66:40:bc:95:00:44:d9:df:5e:98:39:33:
                    55:b4:a5:79:0d:3b:b9:82:07:eb:44:10:df:f2:75:
                    19:87:44:1d:6f:42:0e:15:a3:94:72:a2:f1:42:1d:
                    80:78:d5:3a:fb:8b:b6:8e:53:bf:b9:b4:4c:a0:08:
                    35:ea:66:da:d1:35:41:7c:05:2b:10:92:b5:83:ff:
                    ef:c8:2e:43:69:37:d1:12:08:19:71:eb:11:be:6b:
                    c8:15:67:49:1f:9d:e4:50:18:ac:00:e8:d0:93:c0:
                    c0:4b:43:be:2f:a2:ac:0b:8d:78:61:7e:7d:e4:61:
                    9d:43:2d:b3:3a:ba:c5:78:c4:73:4e:9d:0f:fc:0b:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:34:C2:03:69:65:0C:C6:B9:9D:BB:BD:56:E7:28:54:20:78:DD:6F
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31332f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.13/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:1d:ba:da:f2:06:ac:cc:f8:e7:07:4c:e7:b1:dd:ef:2a:56:
         92:97:92:17:64:7b:4d:f6:04:ed:c4:c0:12:d5:df:72:99:35:
         58:9e:91:8c:0d:94:9e:25:7f:04:2e:7b:bf:23:5f:61:d7:36:
         9e:df:1d:80:75:bc:a5:ab:5f:e4:ce:97:29:db:f8:09:02:17:
         d1:0a:34:c6:b4:fa:7c:83:1f:d8:ee:87:39:cb:de:80:1f:40:
         f7:bd:13:fd:23:4c:57:8f:18:da:77:bc:9d:92:86:33:7f:7b:
         51:9d:e1:fa:02:29:ec:ac:16:bc:69:73:37:e2:b2:ba:82:07:
         4b:5f:99:54:7e:7c:a0:90:87:72:32:30:ef:e6:25:9a:10:83:
         d9:ca:f9:90:43:ed:12:71:70:9d:55:ad:e7:e9:e8:88:06:f5:
         64:8d:cd:6c:1e:ba:c7:f2:a2:1a:c1:e8:03:84:54:81:d9:61:
         a6:0e:8f:db:f5:64:01:a3:82:fb:33:c9:f0:e3:84:1d:66:23:
         96:dc:00:93:20:2d:9f:d4:18:0b:05:dc:37:00:3d:f7:f4:27:
         99:fb:8a:2e:80:a4:fa:5e:d9:10:f7:d3:a9:46:44:65:29:86:
         bc:d6:9d:8e:22:bb:74:2e:4c:e5:aa:15:2f:57:38:53:66:59:
         71:92:d7:89
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNRj4Q8Leaeutq9Fvixu3kiKOgDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMzMwMUZDQkRFMkJBM0M0RDI5QUY1OERBNjE0NTA3
MkQxMDA2QjAeFw0yMjA5MTEyMzI1MjJaFw0yMzA5MTAyMzMwMjJaMDMxMTAvBgNV
BAMTKEZEMzRDMjAzNjk2NTBDQzZCOTlEQkJCRDU2RTcyODU0MjA3OERENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaJB2m+yz1xwRFZRLSTuPO5gS
LVVq8LJPpgI2WfTmCWho09NApmuaeV18Q/PqcqtVpuDEfZpLXp/3TwlDfhGu62a0
KHMV0JWl8AickIqIXo97a2PSyOSZfmBxirnbvgWrFZzLDZnacKbKG2Qk13Vgz3eP
Frqb3X88t2ZAvJUARNnfXpg5M1W0pXkNO7mCB+tEEN/ydRmHRB1vQg4Vo5RyovFC
HYB41Tr7i7aOU7+5tEygCDXqZtrRNUF8BSsQkrWD/+/ILkNpN9ESCBlx6xG+a8gV
Z0kfneRQGKwA6NCTwMBLQ74voqwLjXhhfn3kYZ1DLbM6usV4xHNOnQ/8C8zJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/TTCA2llDMa5nbu9VucoVCB43W8wHwYDVR0j
BBgwFoAUDcMwH8veK6PE0pr1jaYUUHLRAGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC8wREMzMzAxRkNCREUyQkEzQzREMjlBRjU4REE2MTQ1MDcyRDEwMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEQzMzMDFGQ0JERTJCQTND
NEQyOUFGNThEQTYxNDUwNzJEMTAwNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMTMzMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgABMAcDBQAt6DINMA0GCSqGSIb3DQEBCwUAA4IBAQCxHbra
8gaszPjnB0znsd3vKlaSl5IXZHtN9gTtxMAS1d9ymTVYnpGMDZSeJX8ELnu/I19h
1zae3x2Adbylq1/kzpcp2/gJAhfRCjTGtPp8gx/Y7oc5y96AH0D3vRP9I0xXjxja
d7ydkoYzf3tRneH6AinsrBa8aXM34rK6ggdLX5lUfnygkIdyMjDv5iWaEIPZyvmQ
Q+0ScXCdVa3n6eiIBvVkjc1sHrrH8qIawegDhFSB2WGmDo/b9WQBo4L7M8nw44Qd
ZiOW3ACTIC2f1BgLBdw3AD339CeZ+4ougKT6XtkQ99OpRkRlKYa81p2OIrt0Lkzl
qhUvVzhTZllxkteJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org